22 August 2006, 17:37
The service company SPI Dynamics has described a means of carrying out a JavaScript port scan from a web browser. If an attacker were to place such a script on their website, they would be able to scout out the user's network, even if it is protected behind a firewall. In combination with cross site scripting vulnerabilities this could become a security risk. SPI Dynamics outlines in their document how the attack works and links to an example script, which will locate all the web servers on the user's intranet and determine the type of server.
Print Version
| Permalink: http://h-online.com/-747109
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
